Given these two quotes, is the red zone above the stacked return address or below the stacked return address?
The red zone is the 128 bytes just below rsp
, i.e. rsp - 128
to rsp - 1
.
Since this red zone is relative to RSP, does it move downward with each push and does it move upward with each pop?
Yes.